Skip to main content

Privacy Policy

Version 1.3 · Effective 19 August 2026

We do not sell your information to movers

This is the point of the product. The Move Report is not a marketplace and not a lead-generation site. We do not sell, rent, share, or trade your documents, your contact details, or the fact that you are moving to moving companies, brokers, or anyone else. No mover pays us for placement or referrals. We do not sell or share personal information as those terms are used in U.S. state privacy laws.

What we collect

  • The answers you give: two state selections and a small number of questions about your move.
  • The estimate or contract documents you upload, and their filenames.
  • A record that you agreed to the Terms of Use and acknowledged this policy, with the versions and the time.
  • Payment is handled entirely by Stripe. We never see or store your card details. We keep the payment identifiers Stripe gives us, and the amount.
  • A small number of coarse product events — a page was viewed, an upload finished, a report was purchased. These carry no document content, no company names, no dollar amounts, and nothing that identifies you. Property values are restricted by an explicit allowlist in our code.

We do not ask for your name, address, email, or phone number, and there are no accounts. If you email support, we hold that message and your address in our mailbox.

What we do with your documents

  • They are stored in a private bucket that is not publicly readable.
  • Document contents are sent to Anthropic’s Claude API to be read, and to no one else. Anthropic states that API inputs and outputs are not used to train its models.
  • The USDOT or MC number on your estimate is sent to FMCSA’s public developer API to verify the company. Nothing else about you is sent there.
  • Our server logs record counts and timings, not document content.

You may redact your documents

You may redact sensitive information that is not needed for the review. We recommend removing Social Security numbers, driver’s-license or passport numbers, bank-account and routing numbers, payment-card numbers, and unrelated personal information.

Please leave visible: mover and broker names, USDOT and MC numbers, relevant locations and dates, estimate type, inventory, weight or volume, prices, deposits, charges, payment terms, contract clauses, and relevant selections or corrections. Redacting required information may make parts of the report unavailable or less reliable.

How long we keep things

Documents you upload

Uploaded documents are securely retained for up to 30 days to generate your report and troubleshoot problems, then deleted. We do not sell uploaded documents or use them for advertising. This applies whether or not a report was produced — including when we could not read your document, or refused it.

Your filenames and free-scan content are deleted on the same schedule if you do not buy. Limited consent, security, and operational records may be retained as described below.

If you buy a report

  • Your report stays online for 12 months from the date you paid. After that it is deleted automatically: the report, the stored copy of it, the extracted text, your answers, and your filenames. The link stops working.

We chose 12 months because a moving dispute can take months to surface — federal rules give you nine months after delivery to file a written loss or damage claim — and because keeping a link like this alive forever is exposure with no purpose once you have saved a copy. Save or print the PDF while your report is available. That copy is yours permanently and does not depend on us.

If you ask us to delete your report

Email support@themovereport.com from the address you used, or quote your report reference. Once we can verify the request, we delete the same list as above, without waiting for the 12 months. Deletion is recorded — the fact that it happened, never the content.

What we keep afterwards, and why

After any of the deletions above, we retain a limited set of records that contain no document content:

  • Payment and refund records, for accounting, chargebacks and fraud prevention.
  • Your report reference, so support can answer questions about a report that no longer exists.
  • Evidence of which Terms and Privacy version you accepted, and when.
  • An audit record that a deletion occurred.
  • Coarse operational counts and timings.

Backups and our providers

The deletions described above are deletions from The Move Report’s own active systems, which we control and can verify. Our providers may hold copies for their own limited periods that we do not control — our database provider keeps point-in-time backups that age out on their schedule, our hosting provider retains request logs, and Anthropic and Stripe retain data under their own terms and legal obligations. We cannot promise that every copy everywhere disappears the moment ours does, and we will not tell you otherwise.

Who receives your information

  • Anthropic — document contents, to read them.
  • Supabase — our database and file storage.
  • Vercel— our hosting, request logs, and the cookieless site measurement described under “Cookies and measurement” below.
  • Microsoft Advertising and Google Ads— the advertising tags described under “Cookies and measurement” below. Never any part of your estimate.
  • Stripe — payment processing. Your card details go to Stripe, never to us.
  • FMCSA — a USDOT or MC number only.
  • Resend — operational alerts to our own team. These carry no document content.
  • Google Workspace — our support mailbox, if you write to us.

Your report link

Your report is reachable only through a link containing a 256-bit random token, and only that token’s hash is stored, so a copy of our database would not yield working report links. The reference printed on your report is an identifier for support, not a way in — it opens nothing.

There is no password on the link itself: anyone you send it to can read the report, so treat it as private.

Cookies and measurement

Our own cookie is an httpOnly session token that connects your browser to the check you started. It is not used for advertising, and we do not sell or share it.

We advertise this site on Microsoft’s and Google’s search engines, and we run each company’s advertising tag — Microsoft’s UET and Google’s Google tag for Google Ads — on every page so we can tell which ads bring people here. They are advertising technologies, they can recognise your browser across other sites in each company’s advertising network, and they set their own cookies in addition to ours. They receive the page you are on, your IP address and your browser details. They are never given anything from your estimate: no document content, no company names, no addresses and no dollar amounts. If you would rather they did not run, a tracker-blocking extension or your browser’s tracking protection will stop them, and everything on this site keeps working.

We measure how the site is used with Vercel Web Analytics and Speed Insights, run by our hosting provider. These set no cookies, do not store your IP address, and cannot follow you to any other website. They record the page visited, the site or campaign link that sent you, your device type and browser, your country, and how quickly pages loaded.

If you arrive from a link with campaign tags on it, we store those tags — the source, medium and campaign name — with the check you start, so we can tell which of our own links are worth running. That record holds no document content, no name, no address and no advertising identifier, and it is deleted with the rest of your check.

Contact and changes

Questions, or a deletion request: support@themovereport.com.

If we change this policy materially we will publish a new version number and effective date here. This is version 1.3, effective 19 August 2026.